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Amended Claims 



1 . An electronic security device comprising means for receiving and outputting 
signals when in an authorised use state, a real time clock for determining whether a 
predetermined real time period has expired and, if so, seeking an authorisation, 
means for verifying the authorisation, and means for configuring the device into an 
unauthorised use state in the event that a correct authorisation is not received in 
time. 



2. An electronic device according to claim 1, in which the device is adapted to 
receive encrypted authorisation codes. 

3. An electronic device according to claim 1, in which when in an unauthorised 
use state the device received input signals, encrypts them and outputs the 
encrypted signals. 

4. An electronic device according to claim 1, in which the device comprises 
means whereby when in an unauthorised use state, the device reduces the 
frequency at which inputs are transmitted to an input receiver. 

5. An electronic device according to claim 1 , in which the device Includes means 
for generating a random (which expression includes pseudo-random) number 
and means for encrypting the random number. 

6. An electronic device according to claim 5, in which the device includes means 
for performing a predetermined mathematical operation on the random 
number. 
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7. 



An electronic device according to claim 5, in which the device includes means 
for encrypting and decrypting data. 



8. An electronic device according to claim 7, in which the encryption is according 
to a public key algorithm. 



9. An electronic device according to claim 1 , in which the device additionally 
comprises a means for periodically checking the real time clock against a 
predetermined time period. 



1 0. An electronic device according to claim 9, in which the periodic checking 
means comprises a counter which upon reaching a predetermined number 
initiates the check and means for re-setting the counter. 



11. An electronic device according to claim 1 , in which the device comprises a 
dedicated power supply. 



12. An electronic device according to claim 1 1 , in which the device is embodied in 
a plug-in module, which plug in module suitably comprises a power source 
such as a battery. 



13. An electronic apparatus comprising a security device according to claim 1 . 
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14. An electronic apparatus according to claim 13, in which the security device is 
located between an electronic output device and an electronic input device. 



15. An electronic apparatus according to claim 14, in which 

when in an unauthorised use state the device reduces the frequency at which key 
presses are transmitted to or within the electronic apparatus. 

16. A digital electronic computer comprising a security device according to claim 
1. 

17. A method of operating an electronic device comprising a security device which 
receives output signals when in an authorised use state, the method comprising the 
steps of using a real time clock to determine whether a predetermined real time 
period has expired and, if so, seeking an authorisation, checking whether the 
authorisation is acceptable and configuring the device In an unauthorised use state 
in the event that a correct authorisation is not received in time. 

18. A method according to claim 17, in which the authorisation code is encrypted. 

19. A method according to claim 17, in which when in an unauthorised use state 
the device receives input signals, encrypts them and outputs the encrypted signals. 

20. A method according to claim 17, in which when in an unauthorised use state, 
the device reduces the frequency at which inputs are transmitted to an Input 
receiver. 
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21. 



A method according to claim 17, in which the device generates a random 
(which expression includes pseudo-random) number and encrypts the random 
number. 



22. A method according to claim 21 , in which the device performs a 
predetermined mathematical operation on the random number. 



23. A method according to claim 21 , in which the device encrypts and decrypts 
data. 



24. A method according to claim 23, in which the encryption is according to a 
public key algorithm. 



25. A method according to claim 23, in which the encrypted number is transmitted 
to a verification station which verification station decrypts the encrypted number and 
verifies it against a number previously supplied to the electronic device. 



26. An electronic system adapted and configured to operate according to claim 
17. 



-148/258 Page No. 25-- 



09/763104 



wo 00/11536 PCT/GB99/02671 



IMPROVEMEMTS IN AND RELATING TO ELECTRONTC! 

SECURITY DEVICES ~ ^^^^ 

Field Of the Invenl-inn 

The present invention relates to electronic security- 
devices and to methods of operation of electronic devices. 



Backoro mid to hhe Invention 



Despite the growing proliferation of computer hardware 
and software, there are still serious problems associated 
with the security of both of them. Many new problems have 
arisen and others have become exacerbated as computers have 
become progressively more portable. One such particular 
problem is the security of devices themselves against 
theft . 



The present invention aims to provide in preferred 
embodiments thereof, electronic security devices that 
address at least some of the problems of the prior art. 



Suinmarv of fch«a Tnventiort 



According to the present invention in a first aspect, 
there is provided an electronic security device comprising 
means for receiving and outputting signals when in an 
authorised use state, a real time clock for determining 
whether a predetermined real time period has expired and, 
if so, seeking an authorisation, means for verifying the 
authorisation, and means for configuring the device into an 
unauthorised use state in the event that a correct 
authorisation is not received in time. 
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This device provides time -limited security based on a 
real time measure, not based on the last use of the device. 

5 Suitably, the device is adapted to receive encrypted 

authorisation codes. 

Suitably, when in an unauthorised use state the device 
received input signals, encrypts them and outputs the 
10 encrypted signals. 

Suitably, the device comprises means vjhereby when in an 
unauthorised use state, the device reduces the frequency at 
which inputs are transmitted to an input receiver. 

15 

Suitably, the device includes means for generating a 
random (which expression includes pseudo- random) number and 
means for encrypting the random number. Suitably, the 
device includes means for performing a predetermined 

2 0 mathematical operation on the random number. Suitably, the 

device includes means for encrypting and decrypting data. 
Suitably, the encryption is according to a pxiblic key 
algorithm. 

25 Suitably, the device additionally comprises a means for 

periodically checking the real time clock against a 
predetermined time period. Suitably, the periodic checking 
means comprises a counter which upon reaching a 
predetermined number initiates the check and means for re- 

3 0 setting the counter. 

Suitably, the device comprises a dedicated power 
supply. Suitably, the device is embodied in a plug- in 
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module, which plug in module suitably comprises a power 
source such as a battery. 

According to the present invention in a second aspect, 
5 there is provided an electronic apparatus comprising a 
security device according to the first aspect of the 
invention. 

Suitably, the security device is located between an 
10 electronic output device and an electronic input device. 
The output device may, for instance, be a keyboard or a 
modem. The input device may be a central processing unit, 
memory unit, video card etc. Suitably, when in an 
unauthorised use state the device reduces the frequency at 
15 which key presses are transmitted to or within the 
electronic apparatus. 

According to the present invention in a third aspect, 
there is provided a digital electronic computer comprising 
20 a security device according to the first aspect of the 
invention. 

According to the present invention in a fourth aspect, 
there is provided a method of operating an electronic 

25 device comprising a security device which receives output 
signals when in an authorised use state, the method 
comprising the steps of using a real time clock to 
determine whether a predetermined real time period has 
esqpired and, if so, seeking an authorisation, checking 

30 whether the authorisation is acceptable and configuring the 
device in an unauthorised use state in the event that a 
correct authorisation is not received in time. 
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Suitably, the authorisation code is encrypted. 

Suitably, when in an unauthorised use state the device 
receives input signals, encirypts them and outputs the 
5 encrypted signals . 

Suitably, when in an unauthorised use state, the device 
reduces the frequency at which inputs are transmitted to an 
input receiver. 

10 

Suitably, the device generates a random (which 
expression includes pseudo-random) number and encrypts the 
random number. Suitably, the device performs a 

predetermined mathematical operation on the random number. 
15 Suitably, the device encrypts and decrypts data. Suitably, 
the encryption is according to a pxiblic key algorithm. 

Suitably the encrypted number is transmitted to a 
verification station which verification station decrypts 
20 the encrypted number and verifies it against a number 
previously supplied to the electronic device. 

According to the present invention in a fifth aspect, 
there is provided an electronic system adapted and 
25 configured to operate according to the method of the fourth 
aspect of the invention. 

Brief Description of the Figures 

3 0 The present invention will now be described, by way of 

example only, with reference to the Figures that follow; in 
which : 
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Figure 1 is a schematic illustration of an electronic 
data processing apparatus etnbodying the present invention. 

Figures 2A-2C are flow diagrams illustrating a mode of 
operation of the Figure 1 apparatus according to the 
present invention. 

Figures 3A-3E are flow diagrams illustrating more 
detail of a mode of operation of the Figure 1 apparatus 
according to the present invention. 

Description of the Preferred Embodiments 

In one preferred embodiment of the present invention, 
there is provided an electronic data processing apparatus, 
typically a personal computer ("PC") 2. The PC 2 receives 
input signals from peripheral input devices (eg keyboard, 
data socket (modem) , pen, voice recognition microphone 
etc) . The PC 2 includes a keyboard 4 having an associated 
keyboard controller 6 and a bus 8 forming an input channel. 

A security device 10 is located between the keyboard 
controller 6 and the bus 8. The device is shown 
schematically in the control line, but normally it will be 
located elsewhere, for instance in the body of the PC 2 or 
keyboard itself. it needs to be in a vital location so 
that when inactive it renders the equipment it is in 
useless or at least incapacitates it to some extent. The 
security device 10 has the following characteristics. 

includes a real-time clock powered by an 
intemai power- supply. 
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(ii) It includes a fast and reversible (symmetric) 
encryption/ decryption algorithm such as DES or T- 
code (in ROM - read only memory) . 

(iii) It has a slower but more secure (asymmetric) 
public key encryption/decryption algorithm having 
an associated pxiblic key (in ROM) . Although 
referred to as a public key, it will not normally 
be disclosed- 

(iv) It has a volatile memory Random Access Memory 
(RAM) including authorisation codes or an 
algorithm therefor, or pre -stored password and 
means for checking whether an input password or 
code matches such an authorisation code or 
password. The RAM is maintained by the power 
supply . 

(v) It has the capacity to perform predetermined 
mathematical operations (eg in a Z80 processor) . 



The security device 10 is embodied in a silicon device 
including a microprocessor (eg a Z80) , read only memory, 
random access memory and a power source such as a battery 

25 to provide constant power for the real-time clock. If the 
power source for the real-time clock is removed the 
security device 10 will become deactivated. At the 
manufacturing stage the security device 10 is provided with 
a unique serial number to differentiate it from other 

30 corresponding devices, for instance in ROM, EPROM etc. 
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Generally, the security device 10 is activated by an 
activation code. The activation code is provided to the 
security device 10 encoded using a public key algorithm for 
high security. If the activation code is not provided on 
5 demand the security device 10 will enter an unauthorised 
use state . The security device 10 is configured so that 
upon receipt of the correct activation code it is activated 
for authorised use for a period of time determined 
according to the activation code, according to the in-built 

10 real-time clock. The period of time can be varied based 
upon the activation code received. While activated, the 
security device 12 transmits received signals unaltered. 
When not activated it is in the unauthorised use state and 
encrypts signals passing therethrough or delays keyboard 

15 input strikes. Thus, while in the unauthorised use state 
the PC 2 cannot understand the output of keyboard 8 . 

When the predetermined period of operation expires, the 
security device 10 requests a further activation code for 

20 the next period. When requesting a further activation 
code, the security device 10 identifies itself. The 
activation code is requested by the user from a central 
database. The central database checks to determine if a 
further activation can be approved, for instance it may 

25 check to determine whether the device has been reported 
stolen, rental fees due have been paid etc . If further 
activation is authorised, the database encrypts the 
activation code for the next period using the particular 
security device ' s public key which is entered into the 

30 security device 10. The encrypted activation code normally 
is provided via electronic means directly to the security 
device 10, for instance directly by modem or over the 
internet, but can also be entered manually by the user, via 
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a disk or by local infra red transmitter. Upon receipt of 
the encrypted activation code, the security device 10 
decrypts it and checks it against its pre- stored codes to 
detemine the further predetermined period for which it is 
5 to be activated before requiring a further activation code. 

Further security can be provided by an additional step 
of the security device 10 creating a random number which is 
encrypted according to the particular security devices 

10 public key. The encrypted random number is transmitted to 
the database centre (by whatever method) . The database 
centre decrypts the random number, performs a predetermined 
mathematical calculation upon it (this could be as simple 
as to multiply by two or to XOR it with a key) and encrypts 

15 the new value with a public key provided (or its own public 
key) by the centre and sends it back to the security device 
10. The security device upon receipt of the information, 
decrypts it using the relevant public key and compares the 
figures (after reversing the predetermined calculation or 

20 taking it into account) . If the figures correspond then 
the security device 10 is confident it is dealing with the 
correct database centre and will accept reconfiguration 
instructions eg re-setting the real time clock. 

25 If a correct activation code is not provided to the 

security device 10 on demand at the end of the 
predetermined period it enters an unauthorised use state in 
which the user is restricted to, say, 8 keystrokes per 
minute to input subsequent characters etc. Normally, the 

30 security device 10 will demand an activation code some time 
prior to the end of the predetermined period of operation 
so that any errors or administrative difficulties can be 
resolved before the enters its unauthorised use state. 
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The PC 2 may automatically seek an authorisation code, 
for instance via direct modem or internet access to an 
authorisation centre, without the user intervening. 

5 

Each PC 2 normally will only have one such security 
device 10, but each such device 10 manufactured has a 
different public key so each one is unique. Thus, 
generally each device 10 will output a different signal 
10 upon receipt of the same input signal. 

The device also provides password verification and can 
be configured to do this with or without the activation 
code . 

15 

In use, the PC 2 is configured to require a password 
before permitting access to certain functions or data. By 
way of example, a word-processing file may be password 
protected. Before permitting access to the file, the PC 
20 Central Processing Unit (CPU) requires confirmation from 
the security device 10 that the correct password has been 
entered . 

Referring to Figures 2A-2C of the drawings that follow, 
25 there is shown in flow diagrams an overview of the 
operation of the present invention. The flow diagrams show 
a system configured to require correct password input for 
operation from power up and when a predetermined time 
period expires . 

30 

Referring now to Figure 2A, from power up 100 the 
security device 10 checks (101) a flag to determine whether 
it is its first power up in which case a configuration set- 
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up is initiated (103) . In CONFIGURATION the device is 
allocated its unique public key and the real-time clock is 
initialised. Other features such as its predetermined 
mathematical operation, codes for certain time periods, etc 
5 can be configured or modified at this time. The user does 
not know these. When configuration is finished or 
following the "password tamper count" is checked 102. At 
104 if the tamper count is greater than the default tamper 
count a "LOCKED" message is displayed 106 and the security 
10 device 10 is configured into a "PASSWORD LOCKED WAITING" 
state (see Figure 2B) at 108. 

If at 104 the tamper count is less than or equal to the 
default tamper count a password is requested 110. If at 
112 the password is incorrect the tamper count is 
incremented by one 114. If the password is correct the 
security device 10 compares the current real time with the 
time against which activation has been permitted 116. The 
security device 10 also compares the current real time from 
its own internal clock/counter with the time for which 
authorised use has been permitted each time the PC 2 is 
booked {i.e. typically each time WINDOWS (Registered Trade 
Mark) is initialised. If at 118 the time has expired, the 
security device is configured into the "LOCKED WAITING" 
state 120 (see Figure 2C) but if the time has not expired 
the information is passed without interruption (122) . 

Referring to Figure 2B, the "PASSWORD LOCKED WAITING" 
state is now described. In the "PASSWORD LOCKED WAITING" 
3 0 state a keystroke delay facility is enabled. The keystroke 
delay facility only allows one keystroke every eight 
seconds to reach the PC 2. This ensures that inputs needed 
during boot up, or to enter a password are permitted and 



20 
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predictable, but that the device cannot be used 
practicably. 

In the "PASSWORD LOCKED WAITING" state 108, at 124 the 
5 user is required to input a conunand instructing the PC to 
communicate with an authorisation centre. At this stage 
the user can choose manual or automatic communication with 
the authorisation centre. When the command is entered, the 
tamper count is incremented (126) . If (12 8) the tamper 
10 count has expired the device is locked (130) . If the 
tamper count has not expired, the device is allowed (132) 
to operate for a further 3-4 hours to enable the 
verification procedure to be completed. 

15 The security device first creates and encrypts a random 

(or pseudo- random) number and encrypts it with the embedded 
public key (134) . In 134 "PK" = Public Key and "AC" = 
Activation Code. The encrypted random number is 

transmitted to the authorisation centre which may be 

20 automatic, for instance via a direct modem or the internet, 
or manually, for instance by the user phoning up the 
authorisation centre and entering what they are told via 
the keyboard. If the user communicates manually, further 
security can be implemented such as checking the users pre- 

25 allocated password etc. 

The security device 10 then at 13 6 enters a waiting 
state to receive a data string (138) from the network 
authorisation centre ("NOC") which its decrypts. If the 
30 received data is verified (140) the "wrong password tamper 
count" is incremented (142) and the device is permitted to 
operate for a further period with a new password that is 
notified to the user (144) . The input from the 
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authorisation centre includes an activation code and a new 
password encrypted according to the public key of the 
security device 10. If at 140 there is an error, 
indicating perhaps an attempted tampering with the device, 
5 it returns to the "PASSWORD LOCKED WAITING" state and asks 
for a command to be entered. 

The authorisation centre will only provide the security 
device 10 with the necessary authorisation code and new 
10 password if approved. Approval may depend upon payment of 
relevant fees to the authorisation centre, checking whether 
the item of equipment is registered as stolen, or other 
security checks. 

15 Referring to Figure 2C the security device 10 is in the 

"LOCKED WAITING" state 120. As this state is indicative of 
a possible security breach, a higher level of security is 
adopted . 

20 At 146 the security device 10 requires a command to be 

entered instructing it to commimicate with the 
authorisation centre via modem {for instance) . Upon 
receipt of the command 148, the tamper count is checked 
150. If the tamper count is less than or equal to the 

25 DEFAULT valve the ALLOW TAMPER COUNT counter is incremented 
152 and the device is authorised 154 to operate for 3-4 
hours from then until the user downloads an acceptable 
activation code. Next, or if at 150 the ALLOW TAMPER COUNT 
is greater than the default value, at 156 the security 

30 device 10 creates a random (or pseudo- random) number which 
is encrypted using its public key. The encrypted random 
number is transmitted to the authorisation centre together 
with an identifier of the security device 10 in question. 
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The security device 10 then enters 158 a waiting state 
during which it expects to receive a data string from the 
authorisation centre for activation. The authorisation 
5 centre first checks whether the security device 10 can be 
authorised for a further period, for instance by checking 
whether it has been reported stolen or if any monies due 
are outstanding. If further use can be authorised, the 
authorisation centre (knowing the public key of the 

10 security device 10) decrypts the encrypted random number, 
performs a predetermined mathematical operation upon it (eg 
XOR or multiply) , re-encrypts the result using the same 
piiblic key and transmits the encrypted result with an 
encrypted new authorisation code to the security device 10 

15 as a data string. 

Upon receipt 160 of the encrypted data string, the 
random number is checked 162 (since the security device 10 
knows the predetermined mathematical operation iindertaken 
20 by the authorisation centre) and if verified the ALLOW 
TAMPER COUNT is incremented by one 164 and the device is 
authorised (166) for a further 3-4 hours until the user 
downloads a good activation code. 

25 If the data is incorrect, a communication command is 

requested 146 once again. 

Once in normal operation the device 10 uses a counter 
to count up to a predetermined value at which point the 
30 real-time clock is checked against its memory for 
authorisation of a further period. After each check the 
counter is re-set and counts again. Thus, the real-time 
clock is checked periodically against the permitted time of 
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operation to determine if further authorisation is 
required. 

Referring to Figure 3A, once the user has obtained the 
5 software package and it has been installed, on screen he or 
she is invited to register. Having opted to "Register" 
(180) the security device 10 transmits its identification 
nuTuber to the NOC. The user then (182) fills in their 
billing details, activation code period and, optionally, 

10 their password. At 184 the user is asked to verify their 
selection by selecting either "OK" or "CANCEL" , If 
'^CANCEL" is selected then the program is closed {186} . If 
"OK" is selected the password (if any) is checked (188) 
with a pre- stored password. If the password is different 

15 (190) the system returns to 182. If the password is 
accepted, secure communication is established with the NOC. 
If secure communication cannot be established, a message 
can be displayed to this effect and the system returns to 
(184) . The activation code period, billing details, user 

20 Global Unique Identifier ("QUID") and, if used, password 
are sent to NOC at 192. If for any reason the connection 
is broken, at 194 the user is infomed of this and told to 
re-register at 184. 

25 Upon receipt of the details from 192 the NOC sends back 

activation code data and a registration password. The 
password must be stored safely in case the machine is 
stolen. The program then displays the user registration 
password (196) received from the NOC. At 198 the 

30 activation code is passed to the security device 10 which 
check the activation code at 200. If for any reason the 
connection is broken then at 202 the user is informed that 
the connection was prematurely closed, but that the system 
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should still operate. If a confirmation of success is 
indicated, the user program sends positive confirmation to 
the NOC for a fully registered system (204) and the 
connection is closed (206) . If the device indicates a fail 
5 on the activation code the user program sends a negative 
confirmation to the NOC which tells the user to re-register 
(208) . 

Referring now to Figure 3B, a flow diagram illustrating 
10 renewal of an activation code is shown. 

At 22 0 the renewal is initiated either by a user 
clicking on a "RENEW AC" button or the program running 
automatically. At 222 a secure comm-unication is 

15 established with the NOC. At 224 a new AC is requested 
which at 226 is sent by the NOC. The new AC is sent to the 
security device 10 at 228 and if successful (230) confirms 
this to the NOC and closes the connection (232) . If 
unsuccessful the user is told to attempt to renew the AC 

20 again (234) and the connection is closed (232) . 

If no link can be established with the NOC at 222, the 
user is told to attempt to renew the activation code again 
at some future time (234) and the attempted connection is 
25 closed (232) . 

Referring now to Figure 3C, there is shown a flow 
diagram illustrating the capability of the system to change 
a password. 

30 

At 240 the user clicking on an appropriate "button" 
initiates the change of password. The user then (242) 
fills in the new password twice (for validation) and the 
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old password to ensure they are an authorised user. The 
two new passwords are compared and if not identical are 
regarded as invalid at 244, so the system returns to 242. 
If the two new passwords are the same, at 246 the user is 
5 invited to verify their selection by choosing either "OK" 
or "CANCEL" . If the user selects "CANCEL" then the program 
closes at 248. If the user selects "OK", a secure 
coramxinication link is established with the NOC at 250. If 
no link can be established then the system returns to 246. 

10 At 252 the change password request with the new and old 
password is sent to the NOC which at 254 returns 
confirmation to the device 10. Upon receipt of 

confirmation, at 256 the device re-confirms receipt at 256 
and the connection is closed (258) . If for any reason the 

15 connection between the device 10 and NOC is broken, the 
password is not changed (260) and the program closes. 

Referring now to Figure 3D, there is a flow diagram 
showing how a user can change their activation code period. 

20 

Once the user clicks to indicate they wish a period 
change at 270, they are required to fill in their password 
(if one is used) and the new period required at 272. The 
user is then invited to verify their choice by selecting 
25 either "OK" or "CANCEL" at 274. If "CANCEL" is selected 
the program closes at 276. If "OK" is selected a secure 
communication link is established with the NOC at 278. If 
no link can be established, the system returns to 274 . 



Upon a secure communication being established (278) the 
period change request with new activation code period is 
sent to the NOC at 280. The NOC then at 282 sends the new 
activation code back. If for any reason the connection is 
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broken the activation code period is not changed and a try- 
again signal is given at 284. The program then closes 

(276) . Upon receipt of the new activation code, it is 
passed to the security device 10 at 286. The security 
5 device 10 then checks the activation code. If acceptable 

(success) the user program then sends a positive 
confirmation to the NOC at 290 and the NOC returns a 
confirmation at 292. If at 288 the device returns a fail 
message, negative confirmation is sent to the NOC, the 
10 activation code is not changed and a try again signal is 
given (294) . After the NOC returns a confirmation, the 
connection is closed at 296. 

Referring now to Figure 3E, a flow diagram is shown 
15 illustrating how the system can be removed, starting from a 
remove system button at 3 00. 

The user first fills in their password at (302) 
following which they are requested to verify their choice 

20 by selecting either «0K" or "CANCEL" (3 04) . If "CANCEL" is 
selected the program closes (306) . If »0K" is selected, a 
secure communication link is established with NOC (308) . 
If no link can be established, the system returns to (304) . 
Upon a secure link being established, the removal request 

25 is sent to NOC (310) following which the NOC (312) sends a 
removal command to the device 10. The removal command is 
passed to the device (10) at 314 which is then checked at 
316 for validity. If the validity check is failed a 
message is given indicating that the system has not been 

30 removed and inviting the user to tiry again (318) and a 
negative confirmation is sent to NOC (320) following which 
the NOC returns a confirmation (322) and the connection is 
closed (324) . If the validity check indicates a success. 
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the user program sends confirmation to the NOC (326) , the 
NOC returns a confirmation at (322) and the connection is 
closed at (324) , If for any reason the connection with the 
NOC is broken, a message is displayed indicating that the 
5 system has not been removed and inviting the user to try 
again (328) and the connection is closed (324) . 

Further embodiments of the present invention provide 
the security device 12 before a hard disk or other memory 
10 device in a PC architecture. 

In this mode, the device encrypts signals input to the 
hard disk or other memory device and decrypts signals 
output from the same. This makes theft of data from the 
15 hard disk or other memory device harder, especially when 
the mode is combined with the feature described below. We 
refer to this as Auto-Encrypt On Demand Decrypt (AEODD) . 

The device can be placed before any essential integer 
20 of the PC, such as the hard disk, the CPU, the video card 
etc and configured so that it will only operate upon 
periodic receipt of an authorisation code. When correctly 
activated the device onwards transmits received signals. 
If in an unauthorised use state it can block received 
25 signals. Alternatively, in the case of a memory device, 
encryption and decryption can be provided. 

In each case, the provision of the device means that 
unless it is correctly activated the PC cannot properly be 
3 0 used. For instance, in the case of the hard disk option, 
everything that is written to the hard disk is encrypted 
(providing additional security to the data on the disk) 
using the fast encryption algorithm and everything read 
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from it is decrypted by the device. The decryption only 
occurs if the device is activated in an authorised use 
state so if the PC is stolen, then when the perroitted time 
period esqiires no further authorisation can be obtained 
5 (with the assumption that the PC has been reported as 
stolen) , so in effect it will become inoperative. Since 
activation relies on the public key encryption code, it is 
relatively secure. Equally, if the device precedes the CPU 
or video card, if it becomes deactivated, the PC is 
10 inoperative. 

In its unauthorised use state the security device can 
be configured so that it no longer transmits signals, but 
the present invention is not limited to this alternative. 
15 Unauthorised use can also be deterred, for instance, by 
configuring the device to output a useless signal, for 
instance an encrypted version of the input signal . 

Although reference is made herein to a "password" , that 

2 0 can comprise any signal or combination of signals and need 

not be a "word" at all. 

It will be appreciated by those skilled in the art that 
the device can be located in other positions or, 
25 preferably, incorporated integrally within an essential 
element of the PC. 

In a preferred embodiment of the present invention a 
microprocessor security device is provided with a real-time 

3 0 clock on a PC motherboard at a vital point, such as prior 

to the CPU, the video card, the hard disk etc. When 
correctly activated for authorised use, the device receives 
and outputs received signals. The device remains activated 
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for a predetermined period of time. Upon or just prior to 
expiry of the predetermined period, the device seeks an 
authorisation code that can be input to it in any of the 
knov/n ways. If a correct authorisation code is not 
5 entered, the device is set to an unauthorised use state and 
no longer properly outputs received signals. Thus a 
periodic authorisation code is required to keep the 
security device, and hence the PC, operational. 

^0 preferred embodiments, the authorisation code is 

provided in encrypted form and, if desired, a further 
authentication step can be carried out . 

The invention is applicable to any electronic 
15 apparatus. Although the present invention is described in 
relation to a PC, it will be appreciated that in relation 
to the periodic activation code feature it can find 
application in any electronic apparatus, for instance a 
video camera, lap top computer, mobile telephone etc. 

20 

The reader's attention is directed to all papers 
and documents which are filed concurrently with or previous 
to this specification in connection with this application 
and which are open to public inspection with this 
25 specification, and the contents of all such papers and 
documents are incorporated herein by reference. 

All of the features disclosed in this specification 
(including any accompanying claims, abstract and drawings), 
30 and/ or all of the steps of any method or process so 
disclosed, may be combined in any combination, except 
combinations where at least some of such features and/or 
steps are mutually exclusive. 
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Each feature disclosed in this specification (including 
any accompanying claims, abstract and drawings) , may be 
replaced by alternative features serving the same, 
5 equivalent or similar purpose, unless esqpressly stated 
otherwise. Thus, unless expressly stated otherwise, each 
feature disclosed is one example only of a generic series 
of equivalent or similar features . 

10 The invention is not restricted to the details of the 

foregoing embodiment ( s ) . The invention extends to any 
novel one, or any novel combination, of the features 
disclosed in this specification (including any accompanying 
claims, abstract and drawings) , or to any novel one, or any 

15 novel combination, of the steps of any method or process so 
disclosed. 
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Claims 

1. An electronic security device comprising means for 
receiving and outputting signals when in an authorised use 

5 state, a real time clock for determining whether a 
predetermined real time period has expired and, if so, 
seeking an authorisation, means for verifying the 
authorisation, and means for configuring the device into an 
unauthorised use state in the event that a correct 
10 authorisation is not received in time. 

2, An electronic device according to claim 1, in which the 
device is adapted to receive encrypted authorisation codes. 

15 3. An electronic device according to claim 1 or claim 2, 
in which when in an unauthorised use state the device 
received input signals, encrypts them and outputs the 
encrypted signals. 

20 4. An electronic device according to claim 1 or claim 2, 

in which the device comprises means whereby when in an 

unauthorised use state, the device reduces the frequency at 
which inputs are transmitted to an input receiver. 

25 5. An electronic device according to any preceding claim, 
in which the device includes means for generating a random 
(which expression includes pseudo- random) number and means 
for encrypting the random number. 

30 6. An electronic device according to claim 5, in which the 
device includes means for performing a predetermined 
mathematical operation on the random number. 
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7. An electronic device according to claim 5 or claim 6, 
in which the device includes means for encrypting and 
decrypting data. 

5 8. An electronic device according to claim 7, in which the 
encryption is according to a public key algorithm. 

9. An electronic device according to any preceding claim, 
in which the device additionally comprises a means for 

10 periodically checking the real time clock against a 
predetermined time period. 

10. An electronic device according to claim 9, in which the 
periodic checking means comprises a counter- which upon 

15 reaching a predetermined number initiates the check and 
means for re- setting the counter. 

11. An electronic device according to any preceding claim, 
in which the device comprises a dedicated power supply. 

20 

12. An electronic device according to claim 11, in which 
the device is embodied in a plug- in module, which plug in 
module suitably comprises a power source such as a battery. 

25 13 . An electronic apparatus comprising a security device 
according to any one of claims 1 to 12 . 



14. An electronic apparatus according to claim 13, in which 
the security device is located between an electronic output 
30 device and an electronic input device. 
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15. An electronic apparatus according to claim 14, in which 
when in an unauthorised use state the device reduces the 
frequency at which key presses are transmitted to or within 
the electronic apparatus. 

5 

16. A digital electronic computer comprising a security 
device according to any one of claims 1 to 12 . 

17 . A method of operating an electronic device comprising a 
10 security device which receives output signals when in an 

authorised use state, the method comprising the steps of 
using a real time clock to determine whether a 
predetermined real time period has expired and, if so, 
seeking an authorisation, checking whether the 
15 authorisation is acceptable and configuring the device in 
an unauthorised use state in the event that a correct 
authorisation is not received in time. 

18. A method according to claim 17, in which the 
20 authorisation code is encrypted. 

19. A method according to claim 17 or claim 18, in which 
when in an unauthorised use state the device receives input 
signals, encrypts them and outputs the encrypted signals. 

25 

20. A method according to claim 17 or claim 18, in which 
when in an unauthorised use state, the device reduces the 
frequency at which inputs are transmitted to an input 
receiver . 

30 

21. A method according to any one of claims 17 to 20, in 
which the device generates a random (which esqjression 
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includes pseudo- random) number and encrypts the random 
number . 

22. A method according to claim 21, in which the device 
5 performs a predetermined mathematical operation on the 

random number. 

23. A method according to claim 21 or claim 22, in which 
the device encrypts and decrypts data. 

10 

24. A method according to claim 23, in which the encryption 
is according to a public key algorithm. 

25. A method according to claim 23 or claim 24, in which 
15 the encrypted number is transmitted to a verification 

station which verification station decrypts the encrypted 
number and verifies it against a number previously supplied 
to the electronic device. 

20 25. An electronic system adapted and configured to operate 
according to any one of claims 17 to 25 . 
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